Nokia IPSO 4.0 To add a virtual router, Nokia Network Voyager for Ipso 4.0 Reference Guide 193

configuration. You do not have to separately specify settings for each interface. For more information, see “Configuring Monitored-Circuit VRRP using the Simplified Method”.

„Full method—Use this method if you are working with a system on which VRRP has already been configured using this method, or if you want control over the configuration of each individual interface. If you use this method, you must specify settings for each VRRP- configured interface, including which other interfaces are monitored by this one. For more information, see “Configuring Monitored-Circuit VRRP using the Full Method”.

Configuring Monitored-Circuit VRRP using the Simplified Method

To implement monitored-circuit VRRP using the simplified method, you must first create a virtual router by specifying a VRID (the master router IP addresses are added to the virtual router automatically), and then specify values for priority, priority delta, hello interval, and backup address. You do this for each appliance in each VRRP group in turn. For firewall and VPN applications, you generally want to back up at least two interfaces on the appliance—the external network and the internal network.

Note

Before you delete an IP address from a logical interface, you must delete the corresponding backup addresses configured in the monitored-circuit VRRP for the specified virtual router. The configuration for the virtual router might become corrupted if you delete the IP address before you delete the backup addresses. This issue does not apply either to the full method configuration of monitored-circuit VRRP or to VRRPv2.

To add a virtual router

1.Log on to the platform you will use as the master.

2.If you have not done so already, assign IP addresses to the interfaces you will use for the virtual router.

3.Click VRRP under Configuration > High Availability in the tree view.

4.(Optional) If you want to allow the system to accept and respond to IP packets sent to an adopted VRRP IP address, select the Enabled radio button for Accept Connections to VRRP IPs.

The VRRP protocol specifies not to accept or respond to such IP packets. Overriding this specification is recommended if you are deploying applications whose service is tied to a VRRP IP address. You can also use it to allow logins to the master by using an adopted VRRP IP address. You must also enable this option if you configure a virtual IP for VRRP to run on OSFP, PIM, or OSPF.

5.In the Create a New Monitored-Circuit Virtual Router text box, enter a value for the VRID.

6.Click Apply.

7.Additional fields are displayed showing the configuration parameters. Enter values into these fields. For more information see “Selecting Configuration Parameters”.

Nokia Network Voyager for IPSO 4.0 Reference Guide 193